Arch Linux

0BADC0DE

Member

From: Regnum Utriusque Siciliae

Registered: 2018-02-21

Posts: 330

Integrity (checksum?) check problems with riscv64 and riscv32 AURs

At least these 4 AURs:

• riscv32-gnu-toolchain-elf-bin (v2025.11.04-1)

• riscv32-gnu-toolchain-glibc-bin (v2025.11.04-1)

• riscv64-gnu-toolchain-elf-bin (v2025.11.04-1)

• riscv64-gnu-toolchain-glibc-bin (v2025.11.04-1)

fail installation with errors like this:

==> ERROR: One or more files did not pass the validity check!
error: failed to download sources for 'riscv32-gnu-toolchain-elf-bin-2025.11.04-1': 

I have double-checked that:

• Checksums (sha256) in the original repo match those shown in the repo itself;

• Checksums (sha512) as computed by "makepkg -g" match those in both .SRCINFO and PKGBUILD;

• All of the above checksums (both sha256 and sha512) match what I manually compute with commands like "wget -q -O - 'https://github.com/riscv-collab/riscv-g … gcc.tar.xz' | sha512sum' "

I am using paru AUR helper tool but I reverted to a simple manual "makepkg -si" with no luck.

I also have other AUR packages installed/updated with paru, and none has shown this behaviour (so far).

Any hint on what's going on there?

---

Maybe Computers Will Never Become As Intelligent
As Humans. Surely They Won't Ever Become So Stupid.

loqs

Member

Registered: 2014-03-06

Posts: 18,690

Re: Integrity (checksum?) check problems with riscv64 and riscv32 AURs

$ makepkg --verifysource 
==> Making package: riscv32-gnu-toolchain-elf-bin 2025.11.04-1 (Sun 09 Nov 2025 15:51:07 UTC)
==> Retrieving sources...
  -> Downloading riscv32-elf-ubuntu-24.04-gcc.tar.xz...
  % Total    % Received % Xferd  Average Speed   Time    Time     Time  Current
                                 Dload  Upload   Total   Spent    Left  Speed
  0     0    0     0    0     0      0      0 --:--:-- --:--:-- --:--:--     0
100  485M  100  485M    0     0  15.3M      0  0:00:31  0:00:31 --:--:-- 15.6M
==> Validating source files with sha512sums...
    riscv32-elf-ubuntu-24.04-gcc.tar.xz ... Passed

I can not reproduce the issue. What is the output of `type -a sha512sum`?

0BADC0DE

Member

From: Regnum Utriusque Siciliae

Registered: 2018-02-21

Posts: 330

Re: Integrity (checksum?) check problems with riscv64 and riscv32 AURs

$ type -a sha512sum
sha512sum is /usr/bin/sha512sum

Whatever sha512sum (and sha256sum) is pointing at, it has been giving the exact same results as those in GitHub and PKGBUILD.

A subsequent set of manual "makepkg -si" just worked the issue around and installed the new versions.

I have been suggested for a "transient GitHub connectivity issue" which is possible yet improbable: this issue lasted several days.

I have then removed and re-installed those 4 packages with paru and got the exact same issue.

By repeating the process several times (and cleaning the cache up) I get success and failures. A set of transient connectivity issues?

Last edited by 0BADC0DE (2025-11-10 06:29:23)

---

Maybe Computers Will Never Become As Intelligent
As Humans. Surely They Won't Ever Become So Stupid.